A method for detecting the sharing of a password related to a password protected user account provided by an organization, by multiple entities of the organization is disclosed. In one embodiment, input associated with a training word is received from a user of a user computing device. In some examples, the input may include a sequence of user input entries related to the training word. In some embodiments, metadata associated with the sequence of user input entries is derived and a user input pattern profile is generated based on the metadata. In some embodiments, an authorized user of the organization is identified based at least in part on comparing the received input to the user input pattern profile.